Self-service Account Update page configuration
The Identity Management (IdM) tool contains the Self-service Account Update page function to allow end users to change their own user profiles.
The Self-service Account Update page contains various self-service features to manage their profiles:
- Add new user information (for example, mobile number and personal email address) 
- Update user information (for example, new home address and last name change) 
- Update multi-factor authentication (MFA) information 
- Set PIN 
- Select knowledge-based questions (KBQs) 
- Reset device recognition information 
- Revoke devices and browsers provisioned for time-based passcode generation, push notifications, and push-to-accept login requests 
The data store for your organization receives the user profile updates made on the Self-service Account Update page. This depends on the configured data store write permissions. And it reduces directory management time and costs.
Prerequisites
- Data store with service account write privileges to add and change user information 
- A realm for the Account Management page function with the following tabs configured before setting up the Post Authentication tab: - Overview 
- Data 
- Workflow 
- Multi-Factor Methods 
 
Identity Platform configuration
- Go to the Post Authentication tab. 
- In the Post Authentication section, set the following configuration. - Authenticated User Redirect - Set to Self Service Account Update. - Redirect To - This field is autopopulated with the post authentication .aspx page. This is appended to the domain name and realm number in the web address bar. For example, Authorized/AuthorizedAccountUpdate.aspx.  
- In the User ID Mapping section, set the type of User ID to assert in the Self-service Account Update page. This is usually the Authenticated User ID.  
- Click Save. 
- In the Identity Management section, to configure the functions of the Self-service Account Update page, click the Configure self service page link.  
- In the Self Service section, set the user field (and its settings) you want to appear on the Self-service Account Update page. The SecureAuth Field corresponds to the Profile Properties in the Data tab. - For most field settings, use the following Display Type, while others are self-explanatory: - Hide – Do not show the SecureAuth Field on the Self-service Account Update page. 
- Show Disabled – Show the SecureAuth Field on the Self-service Account Update page. User cannot edit this field. 
- Show Enabled – Show the SecureAuth Field on the Self-service Account Update page. User can edit this field. 
- Show Required – Show the SecureAuth Field on the Self-service Account Update page. Require user to edit information in this field. - Notice- In the Regular Expression field, you can limit the type of information in the field users can enter on the self-service page. For more information, see the knowledge base article Restrict allowed information in employee self-service page.  
 
- Save your changes. 
Optional configurations for token or cookie settings and SSO
In the Forms Auth/SSO Token section, you can optionally configure the token or cookie settings, and single-sign on (SSO) for this realm.
|  | 
To configure token or cookie settings, see Configure token or cookie settings.
To configure this realm for SSO, see SecureAuth IdP single sign-on configuration topic.
To configure this realm for Windows Desktop SSO, see Windows desktop SSO configuration topic.